System and method for serving content over a wide area network

• US 7,406,708 B2
• Filed: 03/01/2007
• Issued: 07/29/2008
• Est. Priority Date: 05/16/2000
• Status: Expired due to Term

• Current Assignee: Accessify, LLC (Ascend Innovation Management, LLC)
• Original Assignee: Hoshiko LLC (Raoul Management LLC)
• Inventors: Shuster, Gary Stephen
• Primary Examiner(s): TRAN, ELLEN C
• Application Number:
  US11/681,051
• Publication Number:
  US 20070157293A1
• Time in Patent Office: 516 Days
• Field of Search: 726/4, 726/21, 726/2
• US Class Current: 726/4
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A system and method is provided for using a DNS server operating on a wide area network to enable an authorized reception device to receive (or be provided with) restricted content data associated with a particular wide area network address and redefine the domain name associated with a particular wide area network address. In a preferred embodiment of the present invention, an authorization application is adapted to provide the reception device with user-verification data, receive from the reception device verification data, and provide the filtering application with authorization data. The filtering application, which operates similarly to prior art DNS server systems, is further adapted to receive filtered data (i.e., password-required data and/or pseudo-domain-name data) and authorization data in order to provide an IP address of the content server to the reception device via a wide area network, such as the Internet.

Claims

1. A method for controlling access to IP addresses for content using a domain name system, comprising the steps of:

receiving requests for content at a name server from a plurality of network devices, wherein the name server is configured to receive requests for content from the plurality of network devices via a wide area network and is operably associated with a first memory holding a domain name table, the domain name table listing IP addresses for network content servers in association with domain names and with device identifiers for the network devices, and wherein each request for content comprises a domain name and a device identifier;

determining, for ones of the requests for content, using the domain name table, corresponding ones of authorized network addresses each associated with a device identifier and a requested domain name in the domain name table, for each request in which the device identifier in the domain name table matches a device identifier included in the request, wherein the authorized network addresses comprise IP addresses; and

responding to the requests for content by providing the authorized network addresses to requesting ones of the plurality of network devices.

2. The method of claim 1, further comprising determining, for other ones of the requests, default network addresses each associated with a requested domain name in the domain name table and not with a device identifier, for each request in which the device identifier included in the request does not match a device identifier associated with a domain name in the domain name table, and responding to the requests by providing the default network addresses to requesting ones of the plurality of network devices.

3. The method of claim 2, further comprising operating an authorization server in communication with the name server and with the plurality of network devices via the wide area network, wherein the authorization server is operably associated with a second memory holding an authorization application, the authorization application operable to verify user access privileges for each of the requests.

4. The method of claim 2, further comprising obtaining authorization data from the plurality of network devices for verifying user access privileges.

5. The method of claim 4, further comprising providing the authorization data to the name server.

6. The method of claim 4, further comprising obtaining payment information from users requesting access to specified content.

7. The method of claim 4, further comprising obtaining information from users, the information selected from the group consisting of a user password and the device identifier.

8. The method of claim 4, further comprising providing the default network address in response to requests for which authorization data indicates that the user is not authorized to receive unfiltered information.

9. The method of claim 4, further comprising providing a message indicating that access to requested content is not authorized in response to requests for which the authorization data indicates that the user is not authorized to receive requested information.

10. The method of claim 4, further comprising providing the default network address in response to requests for which authorization data matching the authorization data in the domain name table is not received.

11. The method of claim 1, further comprising rewarding users for designating the name server as their default name server for handling domain name requests.

12. The method of claim 1, further comprising communicating an authorization status to content servers via redirected domain names associated with the domain names in the domain name table.

13. A system for directing access to content over a wide area network, comprising:

a name server configured to receive requests for content from a plurality of network devices via a wide area network, wherein the name server is operably associated with a first memory holding a domain name table, and wherein the domain name table associates P addresses for network content servers with domain names and device identifiers, the name server comprising instructions operable for;

receiving requests for content at a name server from a plurality of network devices, wherein each request for content comprises a domain name and a device identifier;

determining, for ones of the requests for content, using the domain name table, corresponding ones of authorized network addresses each associated with a device identifier and a domain name in the domain name table, for each request in which the device identifier in the domain name table matches a device identifier included in the request, wherein the authorized network addresses comprise IP addresses; and

responding to the requests for content by providing the authorized network addresses to requesting ones of the plurality of network devices.

14. The system of claim 13, wherein the name server further comprises instructions for determining, for other ones of the requests, default network addresses each associated with a requested domain name in the domain name table and not with a device identifier, for each request in which the device identifier included in the request does not match a device identifier associated with a domain name in the domain name table, and responding to the requests by providing the default network addresses to requesting ones of the plurality of network devices.

15. The system of claim 14, further comprising an authorization server in communication with the name server and with the plurality of network devices via the wide area network, wherein the authorization server is operable to obtain authorization data from the plurality of network devices for verifying user access privileges.

16. The system of claim 14, wherein the authorization server is further operable to provide authorization data to the name server.

17. The system of claim 14, wherein the authorization server is further operable to obtain payment information from users requesting access to specified content.

18. The system of claim 14, wherein the authorization server is further operable to obtain information from users, the information selected from the group consisting of a user password and the device identifier.

19. The system of claim 15, wherein the instructions of the name server are further operable to provide the default network address in response to requests for which the authorization data indicates that the user is not authorized to receive unfiltered information.

20. The system of claim 15, wherein the instructions of the name server are further operable to provide a message indicating that access to requested content is not authorized in response to requests for which the authorization data indicates that the user is not authorized to receive requested information.

21. The system of claim 15, wherein the instructions of the name server are further operable to provide the IP address together with the redirected domain name in response to requests for which authorization data matching the authorization data in the domain name table is not received.

22. The system of claim 13, wherein the instructions of the name server are further operable to reward users for designating the name server as their default name server for handling domain name requests.

23. The system of claim 13, further comprising at least one content server in communication with the name server, the content server configured to determine a user authorization status based on redirected domain names provided by the name server as associated with domain names in the domain name table.

24. A computer-readable medium having computer readable instructions stored thereon for execution by a signal processor to perform a method comprising:

receiving requests for content at a name server from a plurality of network devices, wherein the name server is configured to receive requests for content from the plurality of network devices via a wide area network and is operably associated with a first memory holding a domain name table, the domain name table listing IP addresses for network content servers in association with domain names and with device identifiers for the network devices, and wherein each request for content comprises a domain name and a device identifier;

determining, for ones of the requests for content, using the domain name table, corresponding ones of authorized network addresses each associated with a device identifier and a requested domain name in the domain name table, for each request in which the device identifier in the domain name table matches a device identifier included in the request, wherein the authorized network addresses comprise IP addresses; and

responding to the requests for content by providing the authorized network addresses to requesting ones of the plurality of network devices.

25. The computer-readable medium of claim 24 having computer readable instructions stored thereon for execution by a signal processor to perform a method, the method further comprising determining, for other ones of the requests, default network addresses each associated with a requested domain name in the domain name table and not with a device identifier, for each request in which the device identifier included in the request does not match a device identifier associated with a domain name in the domain name table, and responding to the requests by providing the default network addresses to requesting ones of the plurality of network devices.

26. The computer-readable medium of claim 24 having computer readable instructions stored thereon for execution by a signal processor to perform a method, the method further comprising operating an authorization server in communication with the name server and with the plurality of network devices via the wide area network, wherein the authorization server is operably associated with a second memory holding an authorization application, the authorization application operable to verify user access privileges for each of the requests.

27. The computer-readable medium of claim 24 having computer readable instructions stored thereon for execution by a signal processor to perform a method, the method further comprising obtaining authorization data from the plurality of network devices for verifying user access privileges.

28. The computer-readable medium of claim 24 having computer readable instructions stored thereon for execution by a signal processor to perform a method, the method further comprising providing the authorization data to the name server.

29. The computer-readable medium of claim 24 having computer readable instructions stored thereon for execution by a signal processor to perform a method, the method further comprising obtaining payment information from users requesting access to specified content.

30. The computer-readable medium of claim 24 having computer readable instructions stored thereon for execution by a signal processor to perform a method, the method further comprising obtaining information from users, the information selected from the group consisting of a user password and the device identifier.

31. The computer-readable medium of claim 24 having computer readable instructions stored thereon for execution by a signal processor to perform a method, the method further comprising providing the default network address in response to requests for which authorization data indicates that the user is not authorized to receive unfiltered information.

32. The computer-readable medium of claim 24 having computer readable instructions stored thereon for execution by a signal processor to perform a method, the method further comprising providing a message indicating that access to requested content is not authorized in response to requests for which the authorization data indicates that the user is not authorized to receive requested information.

33. The computer-readable medium of claim 24 having computer readable instructions stored thereon for execution by a signal processor to perform a method, the method further comprising providing the default network address in response to requests for which authorization data matching the authorization data in the domain name table is not received.

34. The computer-readable medium of claim 24 having computer readable instructions stored thereon for execution by a signal processor to perform a method, the method further comprising rewarding users for designating the name server as their default name server for handling domain name requests.

35. The computer-readable medium of claim 24 having computer readable instructions stored thereon for execution by a signal processor to perform a method, the method further comprising communicating an authorization status to content servers via redirected domain names associated with the domain names in the domain name table.